Download:
|
by Ahmed Helmy, Deborah Estrin, Eep Gupta
Formal Description Techniques (FORTE XI) & Protocol Specification, Testing, and Verification (PSTV XVIII), 1998 IFIP TC6/WG6.1 Joint International Conference
ftp://ftp.usc.edu/pub/csinfo/tech-reports/papers/98-673.ps.Z
Add To MetaCart
Abstract:
The unprecedented growth of the Internet and the introduction of new network services, such as multicast, has lead to the increased complexity of network protocols and protocol interaction. Multicast protocols support a wide range of multipoint applications ranging from teleconferencing to network games. Unlike traditional point to point protocols, multipoint communication involves multiple senders and receivers, increasing the number of protocol states, and complicating the task of evaluating the behavior and robustness of the protocols and supported applications. In addition, the heterogeneity of network components and technologies has introduced new failure modes that have not been considered traditionally in the design of multicast protocols; such as unicast routing anomalies and selective loss over LANs. The presence of these failures exacerbates the design and testing problems of multicast protocols, due to the esoteric interaction between the different layers in the protocol stack. To date, little effort has been exerted to formulate practical methods and tools that aid in the systematic testing of these protocols. In this paper we present a new algorithm for automatic test generation for multicast routing. We target protocol robustness in specific, and do not attempt to verify other properties in this paper. Our algorithm processes a finite state machine (FSM) model of the protocol and uses a mix of forward and backward search techniques to generate the tests. The output tests include a set of topologies, protocol events and network failures, that lead to violation of protocol correctness and behavioral requirements. We apply our method to a real multicast routing protocol, PIM-DM--which has been deployed in parts of the Internet--, and investigate its behavior in the presence of selective packet loss on LANs and router crashes.
Citations
|
1362
|
RTP: A Transport Protocol for Real-Time Applications
– Schulzrinne, Casner, et al.
- 1996
|
|
924
|
A reliable multicast framework for light-weight sessions and application level framing
– Floyd, Jacobson, et al.
- 1997
|
|
592
|
Systematic Software Development Using VDM
– Jones
- 1990
|
|
387
|
A Computational Logic Handbook
– Boyer, Moore
- 1988
|
|
371
|
Distance Vector Multicast Routing Protocol
– Waitzman, Deering
- 1988
|
|
331
|
A Flexible Framework for Packet Video
– McCanne, Jacobson, et al.
- 1995
|
|
297
|
Formal methods: state of the art and future directions
– Clarke
- 1996
|
|
295
|
F.: Formal Verification for Fault-Tolerant Architectures: Prolegomena to the Design of PVS
– Owre, Rushby, et al.
- 1995
|
|
184
|
Multicast Extensions to OSPF
– Moy
- 1994
|
|
170
|
Understanding Z - A Specification Language and its Formal Semantics. Cambridge Tracts in Computer Science 3
– Spivey
- 1988
|
|
132
|
Using partial orders to improve automatic verification methods,” in Proc. Computer Aided Verification Workshop
– Godefroid
- 1990
|
|
111
|
Core based trees
– Ballardie, Francis, et al.
- 1993
|
|
60
|
A distributed whiteboard for network conferencing
– McCanne
- 1992
|
|
43
|
Protocol verification using reachability analysis: the state space explosion problem and relief strategies
– Lin, Chu, et al.
- 1987
|
|
34
|
Verification Techniques for Cache Coherence Protocols
– Pong, Dubois
- 1997
|
|
31
|
Protocol validation by random state exploration
– West
|
|
19
|
Simulation-based ‘STRESS’ testing case study: A multicast routing protocol
– Helmy, Estrin
- 1998
|
|
19
|
Formal Verification of Communication Protocols
– Smith
- 1996
|
|
17
|
End-to-end routing behavior in the Internet
– Paxon
- 1997
|
|
17
|
End-to-end Internet packet dynamics
– Paxon
- 1997
|
|
16
|
Probabilistic verification of communication protocols
– Maxemchuck, Sabnani
- 1987
|
|
12
|
A recovery approach to the design of stabilizing communication protocols
– Saleh, Ahmed, et al.
- 1995
|
|
12
|
Using partial-order semantics to avoid the state explosion problem in asynchronous systems
– Probst
- 1990
|
|
10
|
Experience in Guiding Simulation
– Pageot, Jard
- 1988
|
|
8
|
The sdr Session Directory: An
– Handley
- 1996
|
|
7
|
A Survey on Kernel Specification and Verification
– Helmy
- 1997
|
|
4
|
NTE - The UCL Network Text Editor. URL http://www-mice-nsc.cs.ucl.ac.uk/mice-nsc/tools/nthelp: about.html
– Handley
- 1996
|